Dialectic Method Spanish app iconDialectic Method SpanishAdvanced Spanish Conversation
Sign In
Home

Legal

Privacy Policy

Last updated: May 10, 2026

Dialectic Method Spanish ("we") provides an AI-guided spoken practice platform. We take privacy seriously and design the service to collect the minimum data necessary to deliver and improve advanced Spanish instruction. This policy explains what we collect, how we use it, and what rights you have over your data, consistent with the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), Brazil's LGPD, Canada's PIPEDA, and other international privacy frameworks.

1. Data we collect

Account information

  • Name and email address (required for sign-in and security notifications)
  • Login credentials: passwords are hashed by our authentication provider; we never store plaintext passwords
  • Account preferences (voice, language, interface settings)

Voice input and transcripts

  • Audio captured from your device's microphone during practice sessions
  • Text transcripts generated from that audio (on-device speech recognition when available; otherwise via our processors)
  • You control microphone access at any time from your device settings

AI conversation content

  • The full exchange between you and the AI interlocutor across the six dialectic stages
  • Stage progression, duration, automated rubric scores, and level estimates (CEFR / ACTFL)
  • Vocabulary shown and feedback generated during each session

Analytics and diagnostics

  • Aggregated product metrics (feature usage, session counts) to understand how learners progress
  • Crash reports and diagnostic logs to detect and fix errors
  • No advertising identifiers, no cross-app tracking, no third-party ad SDKs

Subscription and payment data

  • On iPhone and iPad, subscription purchases are processed exclusively through Apple via the App Store and StoreKit. We never see or store your card number, billing address, or full Apple ID. Apple only shares the anonymized transaction receipt necessary to grant access.
  • On the web, payments are handled by our PCI-compliant payment processor; we receive the billing email, country, and transaction reference, never the full card number.
  • Subscription management, renewal, and cancellation on iOS is handled entirely from your Apple ID account settings.

Optional demographic data for research

  • Age range, gender (optional), education level, native language, country
  • Current level and target level

Technical data

  • Device, browser, and IP address (used transiently for security and abuse prevention)
  • Strictly necessary cookies for authentication (see our Cookie Disclosure)

2. How we use your data

  • To deliver the service — generate AI responses, score sessions, and track your progress.
  • To protect your account — detect fraud, enforce usage limits, and respond to abuse.
  • To improve pedagogy — only with your consent, we retain anonymized, non-identifiable analytics for educational effectiveness research (see §6).
  • To communicate with you — transactional messages (verification, billing, security). We do not send marketing without explicit consent.

3. Legal bases (GDPR Art. 6)

  • Contract — to deliver the service you signed up for.
  • Legitimate interest — to protect the service and prevent abuse.
  • Consent — for optional research participation and any non-essential communication. You can withdraw consent at any time without affecting access to the service.
  • Legal obligation — to comply with tax, accounting, and legal requests.

4. AI processing

Your spoken transcripts are sent to large language models (via enterprise AI gateways) to generate interlocutor responses, scaffolding, and rubric scores. Providers act as data processors under contract and are not permitted to train their general-purpose models on your content. See our AI Disclosure for details.

5. Third-party services and processors

We do not sell personal data. We only share data with the processors that operate the service:

  • Cloud hosting and database — managed PostgreSQL with row-level security and encrypted backups (Supabase / Cloudflare infrastructure).
  • Authentication — a managed identity provider that handles credential encryption and session tokens.
  • AI model providers — Google (Gemini) and OpenAI (GPT), accessed via enterprise gateways under contracts that prohibit training on user content.
  • Speech processing — on-device speech recognition when available; otherwise routed through the same enterprise AI gateway as a processor.
  • Payment processing — Apple App Store / StoreKit for iOS in-app subscriptions; a PCI-compliant processor for web purchases. Neither shares card numbers with us.
  • Analytics and diagnostics — privacy-respecting aggregated product analytics and crash reporting; no ad SDKs.

6. Research data model

With your explicit consent, we retain a strictly limited, non-identifiable research dataset to study the effectiveness of the dialectic method of spoken practice. The dataset includes only: age range, gender (optional), education level, native language, country, current and target level, session duration, rubric scores, and progress metrics. It contains no name, email, transcript text, or IP address. You may opt out at any time from Settings → Privacy.

7. Retention

  • Account, learning, and conversation data: retained while your account is active and up to 30 days after deletion for backups and legal obligations, then permanently deleted.
  • Voice audio: discarded immediately after transcription; we do not retain raw audio recordings.
  • Session transcripts and AI responses: retained for the life of the account and deleted upon account deletion.
  • Diagnostic / crash logs: retained for up to 90 days and then purged.
  • Anonymized research dataset: retained indefinitely for longitudinal studies; cannot be linked back to you.
  • Subscription receipts and Apple billing records: retained for the period required by tax regulations (typically 7 years).

7a. Account deletion

You can permanently delete your account and all associated personal data at any time:

  • In the app — go to Settings → Danger Zone → Delete Account. Deletion is immediate and irreversible; backups are purged within 30 days.
  • By email — write to privacy@dialecticmethod-spanish.com from your account email and we will process the request within 30 days.
  • Apple subscriptions — cancel any active subscription separately from Settings → Apple ID → Subscriptions on your iPhone or iPad before requesting deletion.

8. Your rights

Wherever you live, you can exercise the following rights:

  • Access and portability — download your data in JSON format from Settings → Privacy.
  • Rectification — correct your profile from Settings.
  • Erasure ("right to be forgotten") — delete your account from Settings → Privacy.
  • Withdraw consent — toggle research participation at any time.
  • Object / restrict processing — write to privacy@dialecticmethod-spanish.com.
  • Lodge a complaint — with your local supervisory authority (e.g., the AEPD in Spain, the ICO in the UK, the CNIL in France) or, for California residents, the California Privacy Protection Agency.

9. International transfers

Data may be processed outside your country of residence. Where necessary, we rely on Standard Contractual Clauses or equivalent safeguards.

10. Minors

The service is not directed to children under 16. We do not knowingly collect data from minors.

11. Security

We use row-level access controls, encryption in transit, encrypted backups, and least-privilege service roles. No system is perfectly secure; please report any suspected vulnerability to security@dialecticmethod-spanish.com.

12. Changes

We will notify you of material changes by email and post the updated date at the top of this page.

13. Contact and support